<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>camada blog</title>
    <link>https://www.camada.app/blog</link>
    <description>Security incidents explained for people who run web apps: what happened, why it matters and what to do.</description>
    <language>en-us</language>
    <atom:link href="https://www.camada.app/blog/rss.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>CISA lists PHP2Shell as exploited; mass website hacks remain unproven</title>
      <link>https://www.camada.app/blog/php2shell</link>
      <guid isPermaLink="true">https://www.camada.app/blog/php2shell</guid>
      <pubDate>Tue, 27 Oct 2026 00:00:00 GMT</pubDate>
      <dc:creator>The camada team</dc:creator>
      <description>CISA now lists two PHP flaws as exploited. They allow code execution with no login. What is confirmed so far, and what to do if you run PHP.</description>
      <category>php</category>
      <category>cve</category>
      <category>rce</category>
    </item>
    <item>
      <title>AI agents tried 1,200 sites and planted web shells, records show</title>
      <link>https://www.camada.app/blog/cairn-ai-agents-web-shells</link>
      <guid isPermaLink="true">https://www.camada.app/blog/cairn-ai-agents-web-shells</guid>
      <pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate>
      <dc:creator>The camada team</dc:creator>
      <description>A researcher found open Cairn panels: one operator's AI agents tried over 1,200 sites and planted web shells. Few breaches are independently confirmed.</description>
      <category>ai-agents</category>
      <category>web-shells</category>
      <category>ecommerce</category>
    </item>
    <item>
      <title>Square Enix warns attackers are logging in with reused passwords</title>
      <link>https://www.camada.app/blog/square-enix-password-reuse-logins</link>
      <guid isPermaLink="true">https://www.camada.app/blog/square-enix-password-reuse-logins</guid>
      <pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate>
      <dc:creator>The camada team</dc:creator>
      <description>Square Enix says attackers got into accounts with passwords from other services. It published no count and says a full password reset is possible.</description>
      <category>credentials</category>
      <category>account-takeover</category>
    </item>
  </channel>
</rss>
